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Amendments to the claims: 

This listing of claims replaces all prior versions and listings of claims in the application: 
Listing of claims : 

1 . (currently amended) A method for use in the monitoring of communications traffic, 
comprisingi the step of 

recording packet-data communication traffic received from, and passing through, a 
network switch: 

encrypting the packet-data communication traffic to create encrypted data; and 



encrypted data can be decrypted only by means of decryption keys that exhibit restricted 
availability. 

2. (currently amended) The A method as claimed in Claim 1 further including 
employment of a spare disk and/or CPU capacity within a telecommunications system. 

3. (currently amended) The A method as claimed in Claim 1 further including the step of 
including encrypted search conditions within the decryption keys that are made selectively 
available. 

4. (currently amended) The A method as claimed in Claim 1, further including the step 
of employing separate levels of authorization for access to the stored data. 

5. (currently amended) The A method as claimed in Claim 1, further including the step 
of employing a decryption key that is useable only once. 




storing the recorded traffic as- encrypted data such that the 
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6. (currently amended) The A method as claimed in Claim 1, further including the step 
of logging all accesses to the stored data to an encrypted secure audit trail. 

7. (currently amended) The A method as claimed in Claim 1, further including a tamper 
detection reference within the encrypted data. 

8. (currently amended) The A method as claimed in Claim 1, further including the step 
of monitoring all the available communications traffic. 

9. (currently amended) The A method as claimed in Claim 8, wherein the step of storing 
the recorded traffic comprises the step of recording all of the recorded traffic. 

10. (currently amended) The A method as claimed in Claim 1, wherein the 
communications traffic to be recorded comprises traffic through a telecommunications switch, 
router or gateway. 

11. (currently amended) The A method as claimed in Claim 1, further including the step 
of encrypting details relating to the communications traffic and storing the said encrypted details 
for subsequent access. 

12. (currently amended) The A method as claimed in Claim 1. further including the step 
of authorizing use of the required decryption key in a restricted manner. 

13. (currently amended) A system for use in the monitoring of communications traffic, 
comprising in combination : 

a recorder that records the communications traffic, the communications traffic being 
received by the recorder from a network switch; and 
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a storage device that stores the recorded communications traffic as encrypted data, such 
that the recorded encrypted data can be decrypted only by means of keys that exhibit restricted 
availability. 

14. (currently amended) The A system as claimed in Claim 13 further including 
application software that executes the method steps of anyone or more of Claims 2-12. 

15. (canceled) 

16. (canceled) 

17. (currently amended) A method for use in the monitoring of communications traffic, 
comprising the steps of: 

receiving communications traffic from a network switch; 

encrypting the communications traffic to generate encrypted communications traffic data; 
recording the encrypted communications traffic data; 

storing the recorded encrypted communications traffic data as encrypted data such that 
the encrypted communications traffic data can be decrypted by decryption keys that exhibit 
restricted availability, that allow encrypted search conditions,, and that employs employ separate 
levels of authorization for access to the stored data; and 

encrypting details relating to the communications traffic and storing the said encrypted 
details for subsequent access. 

18. (previously presented) The method as claimed in Claim 17, further including the step 
of employing a decryption key that is useable only once. 

19. (previously presented) The method as claimed in Claim 17, further including the step 
of logging all accesses to the stored data to an encrypted secure audit trail. 
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20. (previously presented) The method as claimed in Claim 17, further including a tamper 
detection reference within the encrypted data. 

21. (previously presented) The method as claimed in Claim 17, further including the step 
of monitoring all the available communications traffic. 

22. (previously presented) The method as claimed in Claim 17, wherein the step of 
storing the recorded traffic comprises the step of recording all of the recorded traffic. 



